//Laravel provides by default a protection against mass assignment security issues. 
//That's why you have to manually define which fields could be "mass assigned" :
class User extends Model
{
    protected $fillable = ['username', 'email', 'password'];
}